CVEs published October 7, 2010
7 CVEs were published on October 7, 2010: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 7
- CVE-2010-1322The merge_authdata function in kdc_authdata.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x before 1.8.4 does not
- CVE-2010-3321RSA Authentication Client 2.0.x, 3.0, and 3.5.x before 3.5.3 does not properly handle a SENSITIVE or NON-EXTRACTABLE tag on a secret key obj
- CVE-2010-3690Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arb
- CVE-2010-3691PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink at
- CVE-2010-3692Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote a
- CVE-2010-3696The fr_dhcp_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent
- CVE-2010-3697The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database